General

  • Target

    5809460886323698fda762c4319f0db0N.exe

  • Size

    92KB

  • Sample

    240724-g1symssaqj

  • MD5

    5809460886323698fda762c4319f0db0

  • SHA1

    bd7a735d22af9a99bb09df1190a10ff8812038bf

  • SHA256

    36eb63e489c7c2267ac296b590afff394ba0d369783c8f16f1c23e099b29a29e

  • SHA512

    151b3cc14d1653e9e0a3255f8f7028a3dd78868b7e71be19b2c665e161bec7d076e28fdb6f0c5cc24558acc586ef4898c48c94c0197dfe23a8e689936b046b07

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rp:V7Zf/FAxTWinkTW3n8

Malware Config

Targets

    • Target

      5809460886323698fda762c4319f0db0N.exe

    • Size

      92KB

    • MD5

      5809460886323698fda762c4319f0db0

    • SHA1

      bd7a735d22af9a99bb09df1190a10ff8812038bf

    • SHA256

      36eb63e489c7c2267ac296b590afff394ba0d369783c8f16f1c23e099b29a29e

    • SHA512

      151b3cc14d1653e9e0a3255f8f7028a3dd78868b7e71be19b2c665e161bec7d076e28fdb6f0c5cc24558acc586ef4898c48c94c0197dfe23a8e689936b046b07

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rp:V7Zf/FAxTWinkTW3n8

    • Renames multiple (2971) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks